Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
File: 323830343a3931383a3a2f33322d3438203d3e203238353834.roa (raw, json)
Hash identifier: 5RBZvCHQ49EXQ8SFlMuD0cKbPd/mukwJpMRgbN4KeK0=
Subject key identifier: DF:F4:4B:38:4D:96:A3:66:51:AD:08:3F:E5:DF:79:66:7C:D4:3A:65
Certificate issuer: /CN=1233961E0559F239AED4F50437087EF6837DC5E3
Certificate serial: 51902C149A8569BDC710D17AB2437E9447614F2E
Authority key identifier: 12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
Signing time: Tue 10 Mar 2026 19:30:13 +0000
ROA not before: Tue 10 Mar 2026 19:25:13 +0000
ROA not after: Tue 09 Mar 2027 19:30:13 +0000
asID: 28584
IP address blocks: 2804:918::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:90:2c:14:9a:85:69:bd:c7:10:d1:7a:b2:43:7e:94:47:61:4f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1233961E0559F239AED4F50437087EF6837DC5E3
Validity
Not Before: Mar 10 19:25:13 2026 GMT
Not After : Mar 9 19:30:13 2027 GMT
Subject: CN=DFF44B384D96A36651AD083FE5DF79667CD43A65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:29:97:37:3c:2e:0e:86:ac:fa:93:2c:9d:
77:58:7e:4e:d9:e9:9f:04:93:e2:9b:e5:b2:e5:b7:
1b:a2:08:7a:bb:f1:0a:2e:7c:17:a1:91:c7:c1:bf:
41:b1:e2:20:a9:80:20:d5:d5:2d:22:f7:a0:e3:dc:
ce:b9:43:ee:3c:ff:7f:06:89:36:91:2f:30:87:cd:
8a:40:97:76:4e:ad:94:4e:1b:6c:13:5e:02:ba:34:
2d:d5:0a:5b:c4:77:6e:d3:76:54:f2:c4:a5:1f:c2:
4a:dd:c9:8f:3f:2c:1b:98:1b:3a:cf:9a:04:54:f9:
b0:44:61:ed:53:9d:f4:fa:90:c9:1d:78:9a:44:92:
d8:3d:95:e8:6c:86:c1:d2:f3:fc:02:6a:a5:df:61:
a9:55:74:09:18:b2:ec:d7:87:36:64:1c:95:b9:76:
d4:70:cd:05:b6:c1:82:c1:01:00:d6:c3:fc:a5:d1:
7e:ec:f0:ca:7f:bb:26:dc:9c:4b:b3:a3:7e:4c:b0:
60:fb:95:7c:36:0d:22:c1:17:96:4d:dc:06:46:e8:
13:20:46:bd:45:69:d5:bf:a4:97:e2:d5:30:0d:c2:
73:2f:79:d3:03:ee:d5:7a:69:05:00:89:af:b8:b6:
82:65:c2:82:57:9f:b0:8a:9e:d7:e9:6b:04:21:11:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F4:4B:38:4D:96:A3:66:51:AD:08:3F:E5:DF:79:66:7C:D4:3A:65
X509v3 Authority Key Identifier:
keyid:12:33:96:1E:05:59:F2:39:AE:D4:F5:04:37:08:7E:F6:83:7D:C5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/1233961E0559F239AED4F50437087EF6837DC5E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1233961E0559F239AED4F50437087EF6837DC5E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:918::/32
Signature Algorithm: sha256WithRSAEncryption
6d:cb:ce:58:46:16:b5:e1:15:e4:da:78:cf:23:10:ae:7d:4b:
b2:9e:74:f3:10:d4:f2:3d:04:77:a7:4e:2e:43:76:58:4a:8d:
c1:8b:9e:89:e9:bc:49:df:03:a5:97:6e:de:81:7b:7d:f0:e9:
b3:fe:25:a4:1e:d2:52:ed:c2:85:37:d1:81:76:8e:82:fa:ad:
76:5b:c1:bb:4f:d9:96:f1:c9:1b:15:b0:d5:37:31:21:2e:2e:
7c:fc:29:57:4f:ef:e1:78:64:56:c1:66:89:cc:0a:96:37:8d:
b5:fb:28:a0:00:e0:6f:9b:cd:df:09:63:de:1c:6c:62:e7:85:
26:4a:be:41:fd:36:1c:a0:f4:37:0a:21:fd:66:d2:1c:db:68:
bf:e8:95:c5:86:cb:e0:41:41:96:39:70:e7:d6:ad:8a:fc:0f:
89:81:84:d4:04:71:98:58:14:86:84:12:d9:85:78:da:5f:7e:
b1:60:53:36:ee:e3:d3:25:52:7d:5f:50:e8:6d:ef:90:57:0d:
a1:bf:3f:34:4d:fa:88:59:c4:a8:83:57:a4:f6:44:43:56:97:
1d:eb:50:89:e6:5e:02:f1:ad:b3:83:f2:2d:53:88:da:3c:ba:
e0:a0:60:8a:aa:89:e4:d6:de:87:e5:42:8a:fa:ee:57:e2:5f:
ea:52:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:48 2026 by rpki-client